Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/piYgoaIWSglt91XcQiHZMYU9OPY.roa
File: piYgoaIWSglt91XcQiHZMYU9OPY.roa (raw, json)
Hash identifier: Lq0mLdZvQnkMG0YvOYjlSmaIva3t2r4k/um7oHhoirE=
Subject key identifier: A6:26:20:A1:A2:16:4A:09:6D:F7:55:DC:42:21:D9:31:85:3D:38:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 163F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/piYgoaIWSglt91XcQiHZMYU9OPY.roa
Signing time: Sun 07 Feb 2021 12:09:14 +0000
ROA not before: Sun 07 Feb 2021 12:09:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 106.1.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5695 (0x163f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A62620A1A2164A096DF755DC4221D931853D38F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:94:5b:08:33:28:81:90:10:fd:19:2f:60:
14:26:9e:0b:f6:0b:bc:3c:43:10:7c:98:66:d8:d4:
55:b3:28:3a:32:df:50:17:9a:9f:00:5e:4d:90:ca:
7a:53:30:fb:c4:b4:f6:24:05:38:7d:0b:c8:95:16:
aa:7d:3d:5f:63:c4:8f:56:ee:0a:b4:10:8c:be:95:
d5:31:74:da:10:9f:d7:d6:51:76:18:1d:df:67:88:
3e:09:0b:c8:38:6b:f5:49:bb:2f:13:1c:d3:df:b6:
4f:04:3a:57:e9:07:cf:c4:3a:85:18:30:a5:32:f8:
df:c9:8d:4f:9d:23:01:05:fb:4b:aa:81:1d:15:0b:
bc:c7:32:63:30:43:d1:1a:5a:fe:04:84:39:41:05:
98:85:de:3e:5d:f0:06:86:48:19:9d:84:d4:f0:6c:
de:93:80:9b:c9:a5:a6:4d:d2:a4:53:01:99:05:9d:
17:d7:01:a4:21:35:70:b9:bd:6e:fd:54:c3:a8:c3:
4c:92:6d:20:68:cf:1a:50:05:c8:3a:b5:36:81:5e:
00:e9:50:fd:df:a6:2b:23:8b:74:ad:7e:b6:9a:36:
a4:8d:76:60:8d:99:1f:97:e0:5c:4c:1a:f3:ef:97:
a7:53:eb:0f:ac:2a:11:00:a7:fe:99:30:d8:15:c2:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:20:A1:A2:16:4A:09:6D:F7:55:DC:42:21:D9:31:85:3D:38:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/piYgoaIWSglt91XcQiHZMYU9OPY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.216.0/22
Signature Algorithm: sha256WithRSAEncryption
87:2f:48:40:ab:f0:7b:d9:12:be:98:a4:76:a7:a4:33:06:86:
32:64:e8:3c:00:2d:09:bd:57:a2:42:0f:af:8d:83:d7:17:ed:
8c:ca:ff:b7:a8:ed:97:d4:18:5f:7d:a8:e7:c5:8d:39:69:7d:
48:70:79:da:b7:57:92:0f:39:78:d0:87:30:06:d1:e4:f4:7d:
d7:7a:77:c8:78:4b:31:b5:92:56:e5:bd:73:9f:90:b1:d4:26:
90:77:9e:d1:06:8c:d6:2e:1b:57:a9:50:d4:b2:6e:f3:30:58:
69:14:47:ca:2e:7f:9f:ab:9e:49:da:7f:ed:27:36:51:c8:b8:
59:6b:78:45:46:6f:29:26:f9:cd:31:17:70:85:e6:70:ae:84:
44:d3:67:8f:eb:2d:c1:88:a3:45:70:f7:a8:4e:ad:6f:5d:e0:
3e:ea:6f:05:de:c1:c2:11:00:4e:f9:96:7f:20:af:8b:6a:fa:
ed:d9:af:79:15:08:a8:83:14:5f:89:77:d4:5c:c3:69:d8:13:
6e:b5:cd:80:a2:7b:f5:eb:ce:de:c1:c2:7e:4d:72:4f:e6:26:
a3:59:de:d0:e4:d1:16:e3:93:9a:24:36:d4:f8:76:1f:0d:e7:
99:f8:35:91:05:52:d5:ba:f9:ec:d0:74:a6:30:a0:a9:c2:13:
c4:83:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org